Technology Independent Honeynet Description Language

Wenjun Fan, David Fernández, Víctor A. Villagrá

2015

Abstract

Several languages have been proposed for the task of describing networks of systems, either to help on managing, simulate or deploy testbeds for testing purposes. However, there is no one specifically designed to describe the honeynets, covering the specific characteristics in terms of applications and tools included in the honeypot systems that make the honeynet. In this paper, the requirements of honeynet description are studied and a survey of existing description languages is presented, concluding that a CIM (Common Information Model) match the basic requirements. Thus, a CIM like technology independent honeynet description language (TIHDL) is proposed. The language is defined being independent of the platform where the honeynet will be deployed later, and it can be translated, either using model-driven techniques or other translation mechanisms, into the description languages of honeynet deployment platforms and tools. This approach gives flexibility to allow the use of a combination of heterogeneous deployment platforms. Besides, a flexible virtual honeynet generation tool (HoneyGen) based on the approach and description language proposed and capable of deploying honeynets over VNX (Virtual Networks over LinuX) and Honeyd platforms is presented for validation purposes.

Download


Paper Citation


in Harvard Style

Fan W., Fernández D. and A. Villagrá V. (2015). Technology Independent Honeynet Description Language . In Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD, ISBN 978-989-758-083-3, pages 303-311. DOI: 10.5220/0005245503030311

in Bibtex Style

@conference{modelsward15,
author={Wenjun Fan and David Fernández and Víctor A. Villagrá},
title={Technology Independent Honeynet Description Language},
booktitle={Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD,},
year={2015},
pages={303-311},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005245503030311},
isbn={978-989-758-083-3},
}


in EndNote Style

TY - CONF
JO - Proceedings of the 3rd International Conference on Model-Driven Engineering and Software Development - Volume 1: MODELSWARD,
TI - Technology Independent Honeynet Description Language
SN - 978-989-758-083-3
AU - Fan W.
AU - Fernández D.
AU - A. Villagrá V.
PY - 2015
SP - 303
EP - 311
DO - 10.5220/0005245503030311